CVE-2023-4244

Note

Priority reason:
Allows local code execution / privilege escalation
Looks like a duplicate of CVE-2023-4563
CVE-2023-4563 was marked as duplicated of this.
USN-6443-1 was firstly announced fixing this CVE for
linux-oem-6.1 in version 6.1.0-1024.24, but one of the fix commits was
missing in that version. The complete fix in linux-oem-6.1 is available
in version 6.1.0-1025.25.
If not needed, disable the ability for unprivileged users
to create namespaces. To do this temporarily, do:
  sudo sysctl -w kernel.unprivileged_userns_clone=0
To disable across reboots, do:
  echo kernel.unprivileged_userns_clone=0 | \
  sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf

Parameter	Value
Base score	7.0
Attack vector	Local
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2023-4244

From the Ubuntu Security Team

Notes

Mitigation

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Needed
	focal	Released (5.4.0-173.191)
	jammy	Released (5.15.0-87.97)
	lunar	Released (6.2.0-35.35)
	mantic	Released (6.5.0-13.13)
	noble	Not vulnerable (6.6.0-14.14)
	trusty	Not vulnerable (3.11.0-12.19)
	upstream	Released (6.6~rc1)
	xenial	Needed
	Patches: Introduced by 3c4287f62044a90e73a561aa05fc46e62da173da Fixed by 24138933b97b055d486e8064b4a1721702442a9b Introduced by 8d8540c4f5e03d847c004e71d6a577bf4f8c78cd Fixed by 24138933b97b055d486e8064b4a1721702442a9b Introduced by 9d0982927e79049675cb6c6c04a0ebb3dad5a434 Fixed by 24138933b97b055d486e8064b4a1721702442a9b Introduced by cfed7e1b1f8ed9b3d81ab12203cfb69c3ef24ac6 Fixed by 5f68718b34a531a556f2f50300ead2862278da26 Introduced by 3c4287f62044a90e73a561aa05fc46e62da173da Fixed by f6c383b8c31a93752a52697f8430a71dcbc46adf Introduced by 8d8540c4f5e03d847c004e71d6a577bf4f8c78cd Fixed by f6c383b8c31a93752a52697f8430a71dcbc46adf Introduced by 9d0982927e79049675cb6c6c04a0ebb3dad5a434 Fixed by f6c383b8c31a93752a52697f8430a71dcbc46adf Introduced by 9d0982927e79049675cb6c6c04a0ebb3dad5a434 Fixed by f6c383b8c31a93752a52697f8430a71dcbc46adf Introduced by d0a8d877da976c244092ce859683b2fa116217db Fixed by c92db3030492b8ad1d0faace7a93bbcf53850d0c Introduced by 5f68718b34a531a556f2f50300ead2862278da26 Fixed by 6a33d8b73dfac0a41f3877894b38082bd0c9a5bc Introduced by 5f68718b34a531a556f2f50300ead2862278da26 Fixed by 02c6c24402bf1c1e986899c14ba22a10b510916b Introduced by 5f68718b34a531a556f2f50300ead2862278da26 Fixed by 02c6c24402bf1c1e986899c14ba22a10b510916b Introduced by 8aeff920dcc9b3f8cf43042a76428582634d9208 Fixed by 23185c6aed1ffb8fc44087880ba2767aba493779 Introduced by f6c383b8c31a93752a52697f8430a71dcbc46adf Fixed by 2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4
linux-allwinner Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Ignored (end of kernel support)
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support, was needs-triage)
	lunar	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Released (6.6~rc1)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Needed
	focal	Released (5.4.0-1120.130)
	jammy	Released (5.15.0-1048.53)
	lunar	Released (6.2.0-1014.14)
	mantic	Released (6.5.0-1010.10)
	noble	Not vulnerable (6.6.0-1001.1)
	trusty	Needed
	upstream	Released (6.6~rc1)
	xenial	Needed
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-hwe-5.3)
	focal	Does not exist
	jammy	Does not exist